Netflix users are being targeted by a phishing scam aimed at making them reveal their credit card details.
Cybersecurity researchers at PhishMe spotted the scam. It starts with a Netflix-branded email asking you to update your account details, complete with a link. But the link takes you to a spoofed (i.e. seemingly genuine but actually bogus) landing page asking for your email address and password.
Once you've entered the required info, you're taken to another seemingly bona fide page asking you to update your credit card details.
Next, you're taken back to a genuine Netflix page. So you could be forgiven for not realising it's a scam.
The scammers could use your details to steal money from your bank account, use your login details to access your other online accounts (if you reuse the same password, that is), or sell that info on the dark web.
"If the threat actor can find examples of password reuse, phishing a consumer service like Netflix might lead to illicit access to an enterprise email account and associated services," said PhishMe researcher Chase Sims.
Remember: never reveal your password or PIN number, and be wary of clicking any links that look in any way suspect.